Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/ec1fdd-1080-4167-955b-205ffaf84c02/1/yLoeGBKG7Nz3TclLwz8ZlJcTs5E.mft
File: yLoeGBKG7Nz3TclLwz8ZlJcTs5E.mft (raw, json)
Hash identifier: pmGCzckCebpkAhkBaNGBG9XNGyuE8JqWdtbbr0g+5G0=
Subject key identifier: 21:8A:8C:90:84:CA:66:65:AD:5D:A8:81:FB:E3:3F:60:D4:4E:85:5B
Authority key identifier: C8:BA:1E:18:12:86:EC:DC:F7:4D:C9:4B:C3:3F:19:94:97:13:B3:91
Certificate issuer: /CN=c8ba1e181286ecdcf74dc94bc33f19949713b391
Certificate serial: 01A175F09760F81D1F93C67AD9CA279A7C4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yLoeGBKG7Nz3TclLwz8ZlJcTs5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/ec1fdd-1080-4167-955b-205ffaf84c02/1/yLoeGBKG7Nz3TclLwz8ZlJcTs5E.mft
Manifest number: 01F9
Signing time: Mon 26 Oct 2026 02:01:03 +0000
Manifest this update: Mon 26 Oct 2026 02:01:03 +0000
Manifest next update: Tue 27 Oct 2026 02:01:03 +0000
Files and hashes: 1: JLl9ieAggP9WR-N8wVWrBA7z2QU.roa (hash: /5ecZkNFv83mEzuS65WLl+FgZAKLhz3j2fY0mS2pA+k=)
2: Z33J-rBD7SOTEmIb_eXTJ1-LaRY.roa (hash: klxLaLJRe/p4fV22qW+zJTTxCBMy1xczkItxrxoNHkw=)
3: yLoeGBKG7Nz3TclLwz8ZlJcTs5E.crl (hash: vlXs5krqIm2u96fETUqLlQ5yNDB0hZg7tw04rdvlIxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/ec1fdd-1080-4167-955b-205ffaf84c02/1/yLoeGBKG7Nz3TclLwz8ZlJcTs5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/ec1fdd-1080-4167-955b-205ffaf84c02/1/yLoeGBKG7Nz3TclLwz8ZlJcTs5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/yLoeGBKG7Nz3TclLwz8ZlJcTs5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:75:f0:97:60:f8:1d:1f:93:c6:7a:d9:ca:27:9a:7c:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8ba1e181286ecdcf74dc94bc33f19949713b391
Validity
Not Before: Oct 26 02:01:03 2026 GMT
Not After : Oct 27 02:01:03 2026 GMT
Subject: CN=218a8c9084ca6665ad5da881fbe33f60d44e855b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d1:5e:ab:40:8a:7a:e0:bf:7b:c2:07:05:a9:
93:1a:a1:39:13:f5:7b:62:33:ad:0c:5f:94:18:e5:
42:be:e4:d8:f9:da:08:b4:9d:04:cd:a0:17:f5:bb:
39:68:42:db:8c:ea:a9:7c:11:85:52:18:72:46:13:
f3:ad:3e:2a:34:0c:d4:de:be:9e:7e:13:ff:e1:79:
ba:03:05:f0:a0:14:ae:54:e0:0c:c4:ca:b2:bb:87:
f8:fb:2d:fd:2b:82:08:e6:fa:db:21:90:f9:82:af:
cc:4c:3c:de:ea:55:74:40:ba:e4:51:07:8f:fc:6e:
53:71:f7:f7:86:13:b5:2b:40:d3:5f:10:15:8b:0e:
b9:4c:ed:e0:75:77:f1:e8:d4:e7:df:06:3f:6a:35:
92:0c:68:d8:66:4e:19:10:3a:37:53:f7:d4:84:76:
55:a5:e7:3f:81:96:b1:ad:8e:74:0f:b2:ab:60:ee:
3f:63:2f:43:26:91:1e:df:be:86:bb:6a:a3:64:58:
6f:c7:1e:ff:83:02:0d:4b:59:d0:d5:e7:ac:71:1d:
26:dc:b5:9e:79:ae:e1:be:0f:bb:4e:1f:fa:70:4e:
30:c8:2c:4e:ff:f1:8e:22:03:cb:bb:18:a3:d1:35:
8e:61:64:bf:eb:df:30:3e:2e:78:ec:9b:24:07:5b:
1c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:8A:8C:90:84:CA:66:65:AD:5D:A8:81:FB:E3:3F:60:D4:4E:85:5B
X509v3 Authority Key Identifier:
keyid:C8:BA:1E:18:12:86:EC:DC:F7:4D:C9:4B:C3:3F:19:94:97:13:B3:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yLoeGBKG7Nz3TclLwz8ZlJcTs5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ec1fdd-1080-4167-955b-205ffaf84c02/1/yLoeGBKG7Nz3TclLwz8ZlJcTs5E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ec1fdd-1080-4167-955b-205ffaf84c02/1/yLoeGBKG7Nz3TclLwz8ZlJcTs5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:da:3e:54:c8:7d:24:0c:d4:5a:b8:a0:9a:2a:6c:cd:77:ae:
bf:2c:0a:19:d9:8f:ca:d0:fd:50:3d:35:d9:5e:4b:2a:c0:d6:
db:71:e3:ed:fd:a9:07:7f:a0:3d:8b:aa:ca:22:0d:cd:38:a1:
03:7b:85:e4:f6:d3:dc:be:fd:7a:1f:3c:fb:90:8e:30:16:92:
93:eb:d9:c1:80:1c:02:7f:93:62:f3:fd:1c:84:0a:f7:b8:f7:
1d:d6:7e:ad:59:c2:33:69:72:72:0c:5c:6e:34:1f:9a:39:f0:
8b:8c:76:f5:15:a4:9c:7f:7d:c0:5c:52:6d:92:4a:c2:3b:55:
18:3d:1f:27:eb:0c:ae:38:5e:3d:55:40:eb:8d:a1:bf:d4:9e:
3a:6c:fd:d8:cf:e9:b2:24:07:a9:27:fd:81:65:1f:98:e2:56:
78:44:b3:6f:a4:7a:e0:74:2f:ae:05:68:99:a9:c1:8f:19:0d:
6c:a3:b1:34:07:66:18:e1:4a:c5:19:ed:a3:81:aa:38:00:1d:
05:82:c5:90:e7:30:91:cc:cb:79:95:02:22:ca:a0:0e:35:d9:
08:d6:7f:3e:2d:bf:af:cf:66:20:2f:97:18:6a:a4:5a:05:7b:
24:f0:74:e8:91:c6:da:89:dd:71:fd:5f:22:4e:b9:52:21:db:
84:53:9e:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 07:29:10 2026 by rpki-client